RUSTSEC-2026-0440
`astral-tokio-tar` is unmaintained
Astral ended maintenance of astral-tokio-tar on November 3, 2026.
All versions of the crate are deprecated and unmaintained.
For strict tar encoding and decoding, Astral recommends tar-codec
as a possible replacement.
What each source reports
OSVNo score
`astral-tokio-tar` is unmaintained
Astral ended maintenance of astral-tokio-tar on November 3, 2026.
All versions of the crate are deprecated and unmaintained.
For strict tar encoding and decoding, Astral recommends tar-codec
as a possible replacement.
- Record
RUSTSEC-2026-0440- Updated
- 2026-11-05
Affected packages
| Package | Affected | Fixed |
|---|---|---|
astral-tokio-tarcrates.io | 0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0440 is a vulnerability with no CVSS score yet in astral-tokio-tar, published November 3, 2026. No source lists public exploit code. No source names a fixed version.